CVE-2017-2747

Description

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJet T920, T930, T1500, T1530, T2500, T2530, before AENEAS_03_04_00.9 for DesignJet T3500, before NEXUS_01_12_00.11 for Latex 310, 330, 360, 370, before NEXUS_03_12_00.15 for Latex 315, 335, 365, 375, before STORM_00_05_01.6 for Latex 560, 570 and Latex 110 that may expose the credentials of the SMTP server configured to receive and process emails generated by the printers.

7.8

CVSS

Severity: High

CVSS 3.0 •

CVSS 2.0 •

EPSS 0.14%

Vendor Advisory hp.com

Affected: HP Inc. HP Designjet printers; HP Latex printers

References

Link	Tags
https://support.hp.com/us-en/document/c05624457	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2017-2747?: CVE-2017-2747 has been scored as a high severity vulnerability.
How to fix CVE-2017-2747?: To fix CVE-2017-2747, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2017-2747 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2017-2747 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2017-2747?: CVE-2017-2747 affects HP Inc. HP Designjet printers; HP Latex printers.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.